Re: [PATCH] net: fix decnet rtnexthop parsing

2016-07-05 Thread David Miller
From: Vegard Nossum Date: Tue, 5 Jul 2016 21:12:53 +0200 > dn_fib_count_nhs() could enter an infinite loop if nhp->rtnh_len == 0 > (i.e. if userspace passes a malformed netlink message). > > Let's use the helpers from net/nexthop.h which take care of all this > stuff. We can do exactly the same

[PATCH] net: fix decnet rtnexthop parsing

2016-07-05 Thread Vegard Nossum
dn_fib_count_nhs() could enter an infinite loop if nhp->rtnh_len == 0 (i.e. if userspace passes a malformed netlink message). Let's use the helpers from net/nexthop.h which take care of all this stuff. We can do exactly the same as e.g. fib_count_nexthops() and fib_get_nhs() from net/ipv4/fib_sema